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Abstract. We study the stability under quantum noise effects of the quantum privacy amplification protocol 
for the purification of entanglement in quantum cryptography. We assume that the E91 protocol is used 
by two communicating parties (Alice and Bob) and that the eavesdropper Eve uses the isotropic Buzek- 
Hillcry quantum copying machine to extract information. Entanglement purification is then operated by 
Alice and Bob by means of the quantum privacy amplification protocol and we present a systematic 
numerical study of the impact of all possible single-qubit noise channels on this protocol. We find that 
both the qualitative behavior of the fidelity of the purified state as a function of the number of purification 
steps and the maximum level of noise that can be tolerated by the protocol strongly depend on the specific 
noise channel. These results provide valuable information for experimental implementations of the quantum 
privacy amplification protocol. 



PACS. 03.65.Yz Decoherence; open systems; quantum statistical methods 
nication - 03.67.Dd Quantum cryptography 



03.67.Hk Quantum commu- 



1 Introduction 

^ ' A central problem of quantum communication is how to 
v> , reliably transmit quantum information through a noisy 
j_j ■ quantum channel. The carriers of information (the qubits) 
' unavoidably interact with the external world, leading to 
phenomena such as decoherence and absorption. In partic- 
ular, if a member of a maximally entangled EPR (Einstein- 
Podolsky- Rosen) pair is transmitted from a sender (known 
as Alice) to a receiver (Bob) through a quantum channel, 
then noise in the channel can degrade the amount of en- 
tanglement of the pair. This problem is of primary impor- 
tance for entanglement-based quantum cryptography. In- 
deed, in the idealized E91 protocol pQ Alice and Bob share 
a large number of maximally entangled states. Entangle- 
ment purification techniques exist |2lri| . In particular, they 
have been applied to quantum cryptography: in Ref. 
a quantum privacy amplification (QPA) iterative proto- 
col was proposed, that eliminates entanglement with an 
eavesdropper by creating a small number of nearly perfect 
(pure) EPR states out of a large number of partially entan- 
gled states. This protocol is based on the so-called LOCC, 
that is on local quantum operations (quantum gates and 
measurements performed by Alice and Bob on their own 
qubits), supplemented by classical communication. 

Under realistic conditions, the quantum operations them- 
selves are unavoidably affected by errors and introduce a 



certain amount of noise. A first study of the impact of 
these errors on the QPA protocol was made in Ref. 
and conditions for the security of QPA were found. How- 
ever, the noise model considered in [H] was not the most 
general one. In particular, error channels like the ampli- 
tude damping or thermal excitations were not considered. 



Studies of the impact of noise on the stability of quan- 
tum computation and communication are of primary im- 
portance for the practical implementation of quantum in- 
formation protocols. In this paper, for the first time all 
single-qubit quantum noise channels are studied and com- 
pared and their different impact on the quantum privacy 
amplification protocol is elucidated. Errors acting on sin- 
gle qubits are described most conveniently using the Bloch 
sphere picture: Quantum noise acting on a single qubit is 
described by 12 parameters, associated to rotations, defor- 
mations and displacements of the Bloch sphere. We study 
in detail the effects of these different errors and show that 
they impact very differently on the QPA algorithm. In par- 
ticular, errors giving a displacement of the Bloch sphere 
are very dangerous. These results provide valuable infor- 
mation for experimentalists: indeed, knowing what are the 
most dangerous noise channels is useful to address exper- 
iments towards implementations for which these channels 
have negligible impact. 
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The paper is organized as follows. The eavesdropper's 
attack strategy is described in Sec. El Here we assume 
that the eavesdropper Eve attacks the qubits sent by Al- 
ice to Bob by means of the quantum copying machine of 
Buzek and Hillery 6 . As a result, Alice and Bob share 
partially entangled pairs. Each pair is now entangled with 
the environment (Eve's qubits) and described by a den- 
sity operator. The QPA protocol, reviewed in Sec. [31 can 
be used to purify entanglement and, as a consequence, 
reduce the entanglement with any outside system to ar- 
bitrarily low values (a maximally entangled EPR pair is 
a pure state automatically deentangled from the outside 
world). We then consider the effects of noise acting on 
the purification protocol. The most general single-qubit 
noise channels are discussed in Sec. 0] We model each 
noise channel by means of equivalent quantum circuits, 
from which the usual Kraus representation and the trans- 
formation (rotation, translation or displacement) of the 
Bloch sphere coordinates can be derived. The impact of 
these errors on the entanglement purification is discussed 
in Sec.0 Finally, in Sec. El we present our conclusions. 



2 Eavesdropping 

We assume that Alice has at her disposal a source of EPR 
pairs and sends a member of each pair to Bob. The eaves- 
dropper Eve wants, on one hand, to find out as much 
information as possible on the transmitted qubits and, on 
the other hand, make his intrusion as unknown as possible 
to Alice and Bob. Isotropic cloning by means of the Buzek- 
Hillcry machine [Sj is the most natural way to meet these 
two requirements. We also note that isotropy is necessary 
only in the case in which Alice and Bob use a six-state 
protocol, that is, the measurements are performed along 
the x, y and z axis of the Bloch sphere. The isotropy con- 
dition may be relaxed when Alice and Bob use a four-state 
protocol: they measure only along x and z and Eve knows 
what are the measurement axes. In this case, it would be 
sufficient for Eve to send Bob qubits that reproduce as 
faithfully as possible the x and z coordinates, but with no 
constraints about y. We have also studied this case (non 
isotropic cloning) but not reported it on the paper for the 
sake of simplicity. 

In the following we assume that, as shown in Fig. \I\ 
Eve attacks the qubits sent by Alice using the Buzek- 
Hillcry machine UJ. The two bottom qubits in Fig. are 
prepared by Eve in the state 

|<2>) =a|00)+ / 3|01)+7|10)+<S|ll) (1) 

and we assume that ev,/3,7, <5 are real parameters. Let us 
call pb and pE the density matrices describing the final 
states of Bob's qubit and Eve's qubit. As we have said, 
we assume isotropy, that is, if we call (x,y,z) the coor- 
dinates of the qubit sent from Alice to Bob before eaves- 
dropping, then the Bloch sphere coordinates (xB,yB, %b) 
and (xe,VBi z e) associated to pb and pe are such that 
xb/x = y B /y = z B /z = R B and x E /x = y E /y = z E /z = 



Re- As shown in AppendixlAl these conditions are fulfilled 
for 

a fl 3 a n 3 

/3=2-V2-4 a ' 7 = °' *=2 + V2-T- (2) 

It can be checked by direct computation (see again Ap- 
pendixfXJ that in this case (xb, ys-, zb) = 2aS(x, y, z) and 
{xE,yE, ze) = 2a0(x,y, z). Since the Bloch sphere coor- 
dinates must be real and nonnegative, we obtain i < 

a < -^=. The ratios Rb = xb/x = yslv = z b/ z and 
Re = xe/x — yE/y = ze/z are shown in Fig. F21 It can 
be seen that the two limiting cases a — -j= and a = 

correspond to no intrusion (xb — x,ys = y,zs — z) and 
maximum intrusion (xe — xs,yE = Vb^ze = Zb), re- 
spectively. In the first case, the qubit sent from Alice to 
Bob is not attacked. In the latter case Eve makes two im- 
perfect identical copies of the original qubit (symmetric 
Buzek- Hillery machine), that is pe = Pb'- in this way Eve 
both optimizes the information obtained about the trans- 
mitted state and minimizes the modification of the qubit 
received by Bob. The degree of Eve's intrusion is therefore 
conveniently measured by the intrusion parameter 

fa = 2 1 "' 00 

with < /„ < 1. 



3 Quantum privacy amplification 

We assume that Alice and Bob purify entanglement by 
means of the QPA protocol rj]. This is an iterative pro- 
cedure, which we briefly review in what follows. At each 
iteration, the EPR pairs are combined in groups of two. 
The following steps are then taken for each group (see 
Fig.©: 

— Alice applies to her qubits a ? rotation about the x- 
axis of the Bloch sphere, described by the unitary ma- 
trix 





' 1 -i 


(2) V2 


-i 1 



— Bob applies to his qubits the inverse operation 



V = U- 1 = R x 





'if 


( 2) V2 


i 1 



— Both Alice and Bob perform a CNOT gate (defined in 
the caption of Fig. fj) using their members of the two 
EPR pairs. 

— They measure the polarizations a z of the two target 
qubits. 

— Alice and Bob compare the measurement outcomes by 
means of a public classical communication channel. If 
the outcomes coincide, the control pair is kept for the 
next iteration and the target pair discarded. Other- 
wise, both pairs are discarded. 
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Fig. 1. Top: quantum circuit representing the intrusion (by 
means of the Buzek-Hillery copying machine) of the eavesdrop- 
per Eve in the E91 protocol. The density matrices pA, Pb and 
Pe represent the states of Alice's qubit, Bob's qubit and Eve's 
qubit after tracing over all other qubits. Bottom: decomposi- 
tion of the unitary transformation W in four CNOT gates. By 
definition, CNOT|a:)|t/> = \x)\y@x), with x,y = 0,1 and © 
indicating addition modulo 2. The first (x) qubit in the CNOT 
gate acts as a control (full circle in the figure) and the second 
(y) as a target qubit (© symbol). Here and in the following 
circuits, any sequence of logic gates must be read from the left 
(input) to the right (output). From bottom to top, qubits run 
from the least significant to the most significant. 
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Fig. 2. Ratios Rb (solid line) and Re (dashed line) for the 
isotropic Buzek-Hillery copying machine versus the parameter 
a. 




Fig. 3. Schematic drawing of the QPA entanglement purifica- 
tion scheme. Note that the density matrix p' AB describes the 
two top qubits only when the detectors Do and D\ give the 
same outcome. 



In order to illustrate the working of the QPA proce- 
dure, let us consider the special case in which the initial 
mixed pairs are described by the density matrix pab ob- 
tained from the ideal EPR state = -4 (|00) + | 11)) af- 
ter application of the Buzek-Hillery copying machine with 
intrusion parameter f a . After application of the unitary 
transformation W in Fig. ^ the overall state of the four- 
qubit system becomes 



^Hoooo) 

+dllll) + 



+ /3|0101) +7|0110) + 5|0011) 
/3|1010) +7|1001) + <J|1100». 



(6) 



After tracing over Eve's two qubits, we obtain 



PAB - 2 



a 2 +8 2 
(3 2 + 

2aS 



7 



2/?7 P 2 






2/97 



■7 



2aS 









(7) 



We note that this state is diagonal in the so-called Bell 
basis 0±) = ^(|00) ± 111)),!^) - ^(|01) ± |10»}. 
Indeed, we have 



p AB =A\<fi+)(<j>+\ + B\<p-)(<p- 
+C|^+)^+|+D|</>-)<V>-|, 



(8) 



where A = ^ 
and D = \{(3 



+ 8f, B - \{a~8f, C = i(/3 + 7 ) 2 
> . . 7) 2 . The quantum circuit in Fig. [21 maps 
the state pab of the control pair, in the case in which 
it is not discarded, onto another state p' A B diagonal in 
the Bell basis. Namely, p' A B can be expressed in the form 
(JHJl, provided that new coefficients (A 1 , B' , C, D') are used 
instead of (A, B, C, D): 



qi _ B 2 +C 2 



r>/ 2AD 



(9) 



ry — 2BC 

N ' ^ ~ N ' 
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where N = (A+D) 2 + (B+C) 2 is the probability that Alice 
and Bob obtain coinciding outcomes in the measurement 
of the target qubits. Note that map © is nonlinear as a 
consequence of the strong nonlinearity of the measurement 
process. The fidelity after the purification procedure is 
given by 

F=(<P + \p' AB \<t> + ) (10) 

(note that F = A'). This quantity measures the probabil- 
ity that the control qubits would pass a test for being in 
the state Map © can be iterated and we wish to 

drive the fidelity to one. It is possible to prove that this 
map converges to the target point A=l,B = C = D = 
for all initial states JHJ with A > h. This means that, when 
this condition is satisfied and a sufficiently large number of 
initial pairs is available, Alice and Bob can distill asymp- 
totically pure EPR pairs. Note that the quantum privacy 
amplification procedure is rather wasteful, since at least 
half of the pairs (the target pairs) are lost at every iter- 
ation. This means that to extract one pair close to the 
ideal EPR state after n steps we need at least 2™ mixed 
pairs at the beginning. However, this number can be sig- 
nificantly larger, since pairs must be discarded when Al- 
ice and Bob obtain different measurement outcomes. We 
therefore compute the survival probability P(n), measur- 
ing the probability that a rt-step QPA protocol is success- 
ful. More precisely, if pi is the probability that Alice and 
Bob obtain coinciding outcomes at step i, we have 




Fig. 4. Deviation 1 — F of the fidelity F from the ideal case 
F — 1 (top) and survival probability P (bottom) as a function 
of the number of iterations n of map @. The different curves 
correspond to the intrusion parameter f a = 0.95 (dashed line), 
0.5 (dot-dashed line) and 0.05 (solid line). 



P(n) = l[ 1 



(11) 



The efficiency £(n) of the algorithm is given by the num- 
ber of obtained pure EPR pairs divided by the number of 
initial impure EPR pairs. We have 



P{n) 



(12) 



Both the fidelity and the survival probability are shown 
in Fig. 01 The different curves of this figure correspond to 
values of the intrusion parameter from f a = 0.05 (weak 
intrusion) to f a = 0.95 (strong intrusion). It can be seen 
that the convergence of the QPA protocol is fast: the fi- 
delity deviates from the ideal case F = 1 by less than 
10 -7 in no more than n = 6 map iterations. Moreover, 
the survival probability is quite high: it saturates to Poo = 
lim^oo P{n) = 0.60 for f a = 0.95, P^ = 0.94 for f a = 
0.5 and Poo = 0.9995 for f a = 0.05. 



We need 12 parameters to characterize a generic quan- 
tum noise operation acting on a single qubit [S] . Each pa- 
rameter describes a particular noise channel (like bit flip, 
phase flip, amplitude damping,...) and can be most conve- 
niently visualized as associated to rotations, deformations 
and displacements of the Bloch sphere. In the following, 
we provide, for each noise channel, 

(i) the Kraus representation, 

(ii) the transformation of the Bloch sphere coordinates, 

(iii) an equivalent quantum circuit leading to a uni- 
tary representation in an extended Hilbert space. A great 
advantage of these equivalent quantum circuits is that 
the evolution of the reduced density matrix describing 
the single-qubit system is automatically guaranteed to be 
completely positive. 

— Rotations of the Bloch sphere - Rotations through an 
angle 9 about an arbitrary axis directed along the unit 
vector n are given by the operator |§] 



4 Single qubit errors 

In any realistic implementation of the QPA protocol, er- 
rors acting on the purification operations are unavoidable. 
For the sake of simplicity we limit ourselves to consider er- 
rors affecting only a single qubit. Nevertheless, we would 
like to stress that a complete treatment of the effects of all 
possible single-qubit noise channels on the QPA algorithm 
is provided in this paper. 



Rn(0) 



e 



(13) 



where er = (cr x , a y , cr z ), er x , a y and a z being the Pauli 
matrices. The quantum circuit representing rotations 
is shown in Fig. [SJ Any generic rotation can be ob- 
tained by composing rotations about the axes x, y and 
z. Let us write as an example the transformation of 
the Bloch sphere coordinates associated to a rotation 
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Rn(6) 









Fig. 5. Quantum circuit representing a rotation through an 
angle 8 about the n-axis. 



IV > 



Fig. 6. Quantum circuit implementing the bit flip channel. 



through an angle 9 about the z-axis: 



x' = (cos9)x — (smff)y, 
y' = (sin9)x + (cos 9)y, 



(14) 



z 



z 



Deformations of the Block sphere - The well known 
bit flip, phase flip and bit-phase flip channels corre- 
spond to deformations of the Bloch sphere into an el- 
lipsoid. An equivalent quantum circuit implementing 
the bit-flip channel is shown in Fig. Note that a 
single auxiliary qubit, initially prepared in the state 
\ip) = cos 1 1 0) + sin f|l) (with < 9 < tt) is sufficient 
to obtain a unitary representation of this noise chan- 
nel. The corresponding Kraus representation is defined 
by the Kraus operators 



cos - | /, 



sin - | ■ ) ., 



The quantum operation 



(15) 



(16) 



maps the Bloch sphere into an ellipsoid with x as sym- 
metry axis: 

y' = '(cos%, (17) 
z' = (cos 9)z, 

The phase flip and bit-phase flip channels are obtained 
from quantum circuits analogous to Fig.EI after substi- 
tution of o~ x with o~ z and o~ y , respectively. In the phase 
flip channel the Bloch sphere is mapped into an ellip- 
soid with z as symmetry axis, while in the bit-phase 
flip channel the symmetry axis is y. 
Displacements of the Bloch sphere - A displacement of 
the center of the Bloch sphere must go with a defor- 
mation of the sphere. This is necessary if we want that 
pf still represents a density matrix: the Bloch radius r 
associated to any density matrix must have length r 
such that < r < 1. This condition can be fulfilled as 
follows. Let us consider, for instance, a displacement of 




Fig. 7. Visualization of the minimum deformation required to 
displace the center of the Bloch sphere along the z-axis. The 
horizontal axis can be any axis in the (a;, y) plane. 



the center of the Bloch sphere along the +z-direction, 
so that the new center is (0, 0, 1 — b), with < b < 1. 
We also assume that the Bloch sphere is deformed into 
an ellipsoid with z as symmetry axis: 



x 2 + y 2 



[z-{l-b)f 
b 2 



= 1. 



(18) 



Imposing a higher order tangency of this ellipsoid to 



the Bloch sphere x 2 + y 2 + z 2 
If we define a = cos 9 (0 < 9 
becomes 



= 1 we obtain b — a . 
< tt/2), then Eq. JTBJ 



y 



sin 



cos 2 9 



= 1. 



(19) 



Note that this equation corresponds to the minimum 
deformation required to the Bloch sphere in order to 
displace its center along the z-axis by 1 — b = sin 2 9. 
The graphic visualization of the mapping of the Bloch 
sphere onto an ellipsoid with displaced center is shown 
in Fig.0 

The mapping of the Bloch sphere onto the ellipsoid 
(I19fl can be obtained by means of the simple equiv- 
alent circuit drawn in Fig. [SJ This circuit leads to a 
single-qubit quantum operation known as the ampli- 
tude damping channel. It is described by the Kraus 
operators 



F 



1 

cos 9 



fi = 



sin( 




(20) 



The corresponding transformation of the Bloch sphere 
coordinates is 



x' = (cos9)x, 
y' = (cos 9)y, 



(cos 2 9)2 



(21) 
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Fig. 8. Quantum circuit implementing a displacement of the 
Bloch sphere along the +z direction. Note that 6' = n/2 — 9. 



I0> 



D 



Fig. 9. Quantum circuit implementing a displacement of the 
Bloch sphere along the —z direction. The unitary transforma- 
tion D corresponds to the boxed part of the circuit in Fig. |S| 
The symbol stands for the NOT gate (|0) -> |1>, |1) -> |0>). 



While displacements of the center of the Bloch sphere 
along the positive direction of the z-axis can be seen 
as representative of zero temperature dissipation, ther- 
mal excitations are instead associated to displacements 
along the — z-direction. The equivalent quantum cir- 
cuit describing thermal excitations is shown in Fig. 
It leads to the Kraus operators 



Fn = 



cost 


> 0" 







0" 





1 


, F 1 = 


sin t 


'0 



(22) 



and to the Bloch sphere coordinate transformation 

(23) 



{cos6)x 1 
(cos 9)y, 

— sin 2 9 + (cos 2 1 



We also consider displacements of the Bloch sphere 
along the directions ±x and ±y. The equivalent quan- 
tum circuit is drawn in Fig. 1101 A displacement along 
±x takes place when the unitary transformation U in 
Fig. El is described by the matrix 



V2 



1 ±1 
Tl 1 



(24) 



The corresponding Kraus operators and the transfor- 
mation of the Bloch sphere coordinates are 



F 



1 - 
±(1 



cos 9 
- cos 9 



±(1 

i ^ 



- cos 9) 
cos 9 



=F sin 9 sin 9 
— sin 9 ± sin 6 



x' = ± sin 2 9 + (cos 2 9)x, 
y' = (cos%, 
z' = (cos 9)z. 



(25) 



(26) 



10 > 



u 



D 



u 



t 



Fig. 10. Quantum circuit implementing a displacement of the 
Bloch sphere along the ±x or ±y directions. The unitary trans- 
formation D corresponds to the boxed part of the circuit in 
Fig. El 



For a displacement along ±y we have 



U = 



1 

72 



1 ±i 
±i 1 



l + cos6> ±i(l-cos0) 
=pi(l — cos 9) l + cos# 



Fi = h 



±i sin 9 sin 9 
sin 9 =pi sin ( 



x' = (cos9)x, 

y' = ± sin 2 9 + (cos 2 9)y, 

z' = (cos 9)z. 



(27) 



(28) 



(29) 



We have given a geometric interpretation of 9 out of 
the 12 parameters describing a generic single-qubit quan- 
tum operation (3 are associated to rotations about the 
axes x, y or z, 3 to displacements along the same axes, and 
3 to deformations of the Bloch sphere into an ellipsoid, 
with x, y or z as symmetry axes). The remaining 3 pa- 
rameters correspond to deformations of the Bloch sphere 
into an ellipsoid with symmetry axis along an arbitrary 
direction. Since these deformations can be obtained by 
combining the 9 previously studied quantum operations, 
then, for small errors, it will be sufficient to consider only 
9 parameters. 



5 Impact of noise on entanglement 
purification 

We discuss the impact of the 9 noise channels described 
in the previous section on the QPA algorithm. We present 
numerical data for the case in which quantum noise acts 
on the top qubit in Fig. Rafter the [/-rotation. However, 
we point out that very similar results are obtained when 
noise acts on one of the other three qubits in the same 
figure. Data are obtained by iteration of a four-qubit noisy 
quantum map, with input state pab ® Pab and output 
state (for the first two qubits) p' AB [ITj) . 

We measure the quality of the purified EPR pair by the 
fidelity F, defined in Eq. i|l(J|) . Moreover, we compute the 
survival probability P(n), defined in Eq. Ijlip. measuring 
the probability that a n-step QPA protocol is successful. 

We note that the following symmetries in the effect of 
errors are observed for the QPA algorithm: 
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Fig. 11. Same as in Fig. [I] but for the bit flip channel at 

= io _1 . 



Fig. 12. Same as in Fig. [I] but for the noise channel cor- 
responding to a displacement along the a>axis of the Bloch 
sphere, at $ = 10~ 3 . 



(i) rotations through an angle +9 or —9 have the same 
impact; 

(ii) displacements along the positive or the negative 
direction of a given axis have the same effect; 

(iii) rotations about the x axis and deformations with 
x as symmetry axis (bit flip channel) have the same effect; 
the same observation applies for the axes y and z as well. 

The main result of our studies is the demonstration 
that the sensitivity of the quantum privacy protocol to 
errors strongly depends on the kind of noise. Two main 
distinct behaviors are observed: 

(i) the fidelity is continuously improved by increasing 
the number of purification steps; 

(ii) the fidelity saturates to a value F < 1 after a finite 
number of steps, so that any further iteration is useless 

EU 

As examples of behaviors of the kind (i) and (ii) we 
show the bit-flip channel in Fig. El (f° r error strength 9 = 
10 _1 ) and the displacement along x in Fig.El(# = 10~ 3 ). 
In both figures, the survival probability P(n) can also be 
seen. Note that, for these sufficiently small error strengths, 
the values of P(n) shown in Fig. ^2 an d Fig- El are not 
very far from those of the ideal protocol (see Fig. 0}. 

It is important to point out that not only the behavior 
of F(n) is qualitatively different depending on the noise 
channel but also the level of tolerable noise strength is 
channel-dependent. To give a concrete example, we show 
in Fig. El the deviation 1 — F of the fidelity from the ideal 
value F = 1 as a function of the noise strength 9. Data are 
obtained after n — 5 iterations of the QPA protocol, in the 
case of strong Eve's intrusion (/ Q = 0.95) and we consider 
the bit flip, the phase flip and the amplitude damping 



(displacement along z) channels. In the noiseless case we 
start from 1 — F = 1.57 x 1CP 1 and improve the fidelity 
to 1 — F = 8.20 x 10~ 6 after n — 5 iterations of the 
quantum privacy amplification protocol. Even though all 
noise channels degrade the performance of the protocol, 
the level of noise that can be safely tolerated strongly 
depends on the specific channel. For instance, it is clear 
from Fig.Elthat the QPA protocol is much more resilient 
to bit flip and amplitude damping errors than to phase flip 
errors. 

A further confirmation of the very different impact of 
the various noise channels is shown in Tabled showing, at 
f a = 0.95, the value of 9 such as 1 — F = 10~ 4 after n = 5 
map iterations. This gives an estimate of the maximum 
level of error tolerable for each noise channel. It is inter- 
esting to remark that displacements of the Bloch sphere 
along x and y are much more dangerous than displace- 
ments along z. We note that the value 1 — F = 10 -4 has 
been chosen just for convenience but the same conclusions 
are obtained also for other values of 1 — F. We also point 
out that, as shown in Tabic ^ it is possible to achieve very 
good fidelities in a small number of purification steps also 
for quite high errors 9 ~ 10 _1 >> 1 — F affecting the QPA 
protocol. 



6 Conclusions 

We have performed a systematic study of the effects of 
the different single-qubit noise channels on the quantum 
privacy amplification protocol. Our results show the very 
different impact of the various noise channels on the QPA 
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Fig. 13. Deviation f — F of the fidelity F from the ideal case 
F = 1 as a function of the noise strength 9, after n = 5 steps 
of the quantum privacy amplification protocol, for f a — 0.95, 
bit flip (circles), phase flip (squares) and amplitude damping 
(triangles) channels. 
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Table 1. Value of the noise strength 9 such that 1 — F = 10 
after n = 5 iterations of the purification protocol, at f a = 0.95. 



algorithm. In particular, we have distinguished between 
cases where it is possible to drive the fidelity arbitrarily 
close to one and others in which the fidelity saturates to a 
value different from one. Another important feature that 
emerges from our investigations is the strong dependence 
of the maximum noise strength tolerable for the QPA pro- 
tocol on the noise channel. This is a valuable piece of in- 
formation for experimental implementations. For instance, 
the fact that the QPA protocol is much less sensitive to 
displacements along z than along x or y suggests that the 
z-axis is chosen along "the direction of noise" . We can then 
choose the axes x and y to minimize other noise effects. 
Finally, we remark that studies like the present one, tak- 
ing into account all possible single-qubit quantum noise 
channels, promise to give useful insights also in the field 
of quantum computation. 

One of us (G.B.) acknowledges support by EU (IST- 
FET EDIQIP contract) and NSA-ARDA (ARO contract 
No. DAAD19-02-1-0086). 



A Isotropic cloning 

Let us first consider the case in which the initial state 
of Bob's qubit is pure, \ip) = p\0) + t^|l), where p, v are 
complex numbers, with |/i| 2 + |i/| 2 = 1. The unitary trans- 
formation W in Fig. Q] ma PS the state |^)|^) (where |<£) 
is given by Eq. onto the state 



\&) = p(a\tititi) + /3|101) + 7 |110) + <5|011» 
+2/(a|Hl) + /5|010) + t|001) + <5|100>). 



(30) 



We then obtain the density matrix ps after tracing the 
density matrix |?f r )(!f r | over Eve's qubit and the ancillary 
qubit. We have 



PB 



N 2 (a 2 +<5 2 ) 

-HH 2 (/3 2 + 7 2 ) 



2fi* vaS \fi\ 2 {{3 2 + 7 2 ) 
+2fu/*/3 7 +M 2 (a 2 +<5 2 ) 



(31) 



In the same way we obtain the density matrix pe after 
tracing over Bob's qubit and the ancillary qubit: 



PE 



H 2 (« 2 + /? 2 ) 

+ M 2 (7 2 +<5 2 ) 



2pv*af3 
+2p"v^8 



2fi*va/3 |/i| 2 ( 7 2 + <5 2 ) 
+2/^* 7 <5 +M 2 (a 2 +/3 2 ) 



(32) 



Let us call (x,y,z), (x B ,yB,z B ) and (x E -,yE-,z E ) the 
Bloch sphere coordinates corresponding to p B and 

Pe- We have 



(iv* = ~(x - iy), 



2 (1 + Z) ' 



2 V ' 



After setting 7 — 0, we obtain 

\{x B - iys) = (pb)oi = (x- iy)a6, 
i(l + z B ) = (pb)oo = |(1 + z)(a 2 + S 2 ) + |(1 - 
which imply 

xb = 2aSx, 
y B = 2aSy, 
z B = {a 2 + 6 2 -/3 2 )z. 

The state Pb is an isotropic cloning of \4>){il 
Rb = xb/x = yslv = zb/z. Therefore we obtain 

2aS = a 2 + S 2 - (3 2 , 
a 2 +(3 2 + S 2 = 1, 



so that 



2 V 2 4 



In the same way we obtain 



x b = 2af3x, 
y E = 2a(3y, 
z E = {a 2 + f3 2 



S 2 )z. 



(33) 



z)/3 2 , 
(34) 



(35) 



when 



(36) 



(37) 



(38) 



G. Benenti, S. Felloni, and G. Strini: Effects of single-qubit quantum noise on entanglement purification 



9 



Isotropic cloning (Re = xe/x = ue/u — Ze/z) is ob- 
tained when 



Note that, if we choose the plus sign in (J37J, then the 
minus sign has to be taken in l|4(J|) in order that the nor- 
malization condition a 2 + [3 2 + S 2 is satisfied. This choice 
corresponds to Eq. J2J. 

Note that the cloning is isotropic also in the case in 
which the initial state p of Bob's qubits is mixed. In this 
case we can write p = 'Y^nPiPi, with pi = \ipi)(ipi\ pure 
state. The Bloch vector r associated to p is the weighted 
sum of the Bloch vectors associated to the density 
matrices p^. r = X^^* 1 "*- Since we have seen that for 
pure initial states (t^b = Rb^i and (t^e = Re^i, then 
v b = Y.iPi( v i)B = Rbtc and r E = Y.iPi( v i)E = r e?- 
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so that 
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